This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/zi6BX2pprFhR63Y5lPO5fzP2XJw.roa File: zi6BX2pprFhR63Y5lPO5fzP2XJw.roa (raw, json) Hash identifier: k4cOLLcWBtedRh3+dHl3HpPG8a/ZH38IiLNVDqMNrQ8= Subject key identifier: CE:2E:81:5F:6A:69:AC:58:51:EB:76:39:94:F3:B9:7F:33:F6:5C:9C Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f Certificate serial: 019B7DCAB60D9B39C976D7AEAA04059BEDDB Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/zi6BX2pprFhR63Y5lPO5fzP2XJw.roa Signing time: Fri 02 Jan 2026 08:19:55 +0000 ROA not before: Fri 02 Jan 2026 08:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47764 IP address blocks: 5.61.16.0/21 maxlen: 21 5.101.40.0/22 maxlen: 22 45.136.20.0/22 maxlen: 22 83.222.28.0/22 maxlen: 22 87.242.112.0/22 maxlen: 22 185.16.148.0/22 maxlen: 22 185.16.244.0/22 maxlen: 22 185.16.244.0/23 maxlen: 23 185.16.246.0/24 maxlen: 24 185.16.247.0/24 maxlen: 24 185.100.104.0/22 maxlen: 22 185.226.52.0/22 maxlen: 22 193.203.40.0/22 maxlen: 22 217.20.144.0/20 maxlen: 20 217.174.188.0/22 maxlen: 22 2a00:b4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b6:0d:9b:39:c9:76:d7:ae:aa:04:05:9b:ed:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f Validity Not Before: Jan 2 08:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce2e815f6a69ac5851eb763994f3b97f33f65c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:8b:15:57:f8:dc:f4:70:01:b4:70:20:87: 3d:2a:9f:b5:be:b6:31:b3:b8:89:44:43:75:99:3d: 7d:6c:27:28:05:61:7d:b5:8f:45:ae:b8:15:61:5c: d1:da:40:3c:bc:3d:e7:61:26:fd:76:77:8e:6a:db: 1b:8b:01:07:ad:2c:52:e3:bb:6b:5e:c1:77:c4:58: b7:96:4d:8a:66:b3:30:c1:37:99:43:9e:58:10:0a: 63:94:b8:dd:66:0b:41:99:f2:ae:af:27:62:8c:46: a4:44:27:6c:a7:1f:0c:b6:1f:c6:5d:ba:f4:4b:85: 44:d4:76:de:90:18:db:dc:ff:14:1a:ae:6a:0e:aa: 5a:6e:b8:1c:6f:35:a6:7d:a3:9e:fb:94:d0:f2:18: 51:d9:c3:69:c6:ff:d7:78:ac:88:14:85:05:0f:29: e2:8a:8b:7e:e9:56:7a:a1:f2:67:9e:9b:6a:3d:9d: bf:94:89:16:42:3e:cf:9c:02:2e:71:cf:08:01:d3: 37:46:96:d6:21:5c:19:e3:ec:e3:a3:cd:9b:cb:1f: 9a:f5:81:be:5c:5c:38:75:50:7f:d8:ec:37:2e:15: ff:90:16:84:31:7e:4c:de:81:f0:74:3a:e3:72:2b: 49:ee:14:76:67:5e:3b:75:76:6e:01:81:3b:12:bf: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2E:81:5F:6A:69:AC:58:51:EB:76:39:94:F3:B9:7F:33:F6:5C:9C X509v3 Authority Key Identifier: keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/zi6BX2pprFhR63Y5lPO5fzP2XJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.16.0/21 5.101.40.0/22 45.136.20.0/22 83.222.28.0/22 87.242.112.0/22 185.16.148.0/22 185.16.244.0/22 185.100.104.0/22 185.226.52.0/22 193.203.40.0/22 217.20.144.0/20 217.174.188.0/22 IPv6: 2a00:b4c0::/32 Signature Algorithm: sha256WithRSAEncryption 70:96:fd:f5:da:46:19:37:c8:d4:86:e7:bf:2f:4c:ef:5c:27: 0e:a7:15:ba:50:50:91:75:c0:4a:9d:82:a7:31:58:25:ec:ef: fb:46:5c:1d:3c:e7:2d:43:98:d2:30:db:dc:ad:46:9e:8f:ad: 1a:54:ff:a5:cb:3b:b6:fc:fb:f8:27:d4:81:fb:38:1a:9e:06: 44:83:dd:63:4d:8b:51:08:b6:46:96:6e:c6:6d:b9:24:22:24: 1e:84:a7:f9:81:41:c5:ce:be:33:d0:3e:8f:ec:97:85:22:a2: 10:84:01:6d:41:af:49:d6:4b:1c:04:cd:c9:45:71:8b:d2:1d: 78:db:bb:82:10:a6:e2:70:88:d0:17:50:f7:93:ce:d3:19:e2: 00:53:bb:39:27:88:50:bc:75:6e:c8:b7:c4:ef:f7:c4:89:81: 69:06:3e:b5:e9:ad:d8:b8:b7:67:8f:12:5a:f7:67:a7:0d:2e: f8:29:79:94:1f:23:55:29:a9:22:9a:54:c0:df:04:e1:6a:62: cd:cc:81:6a:ed:30:5f:a3:22:24:a9:5f:1d:09:df:80:19:64: e3:a3:e6:33:c2:80:e1:a9:f9:1e:bb:83:4e:e4:b8:12:07:64: 3b:cb:73:77:90:9c:ee:a5:ca:a1:f0:67:d8:8f:3b:8d:97:e6: 75:79:15:09 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt9yrYNmznJdteuqgQFm+3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2IxZDI3NzNhMDNkMzE3YTc3MDMxOTNkMmY0NTQyOWE5 NGJhOWYwHhcNMjYwMTAyMDgxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTJlODE1ZjZhNjlhYzU4NTFlYjc2Mzk5NGYzYjk3ZjMzZjY1YzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pyLFVf43PRwAbRwIIc9Kp+1vrYx s7iJREN1mT19bCcoBWF9tY9FrrgVYVzR2kA8vD3nYSb9dneOatsbiwEHrSxS47tr XsF3xFi3lk2KZrMwwTeZQ55YEApjlLjdZgtBmfKurydijEakRCdspx8Mth/GXbr0 S4VE1HbekBjb3P8UGq5qDqpabrgcbzWmfaOe+5TQ8hhR2cNpxv/XeKyIFIUFDyni iot+6VZ6ofJnnptqPZ2/lIkWQj7PnAIucc8IAdM3RpbWIVwZ4+zjo82byx+a9YG+ XFw4dVB/2Ow3LhX/kBaEMX5M3oHwdDrjcitJ7hR2Z147dXZuAYE7Er/gUQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFM4ugV9qaaxYUet2OZTzuX8z9lycMB8GA1UdIwQY MBaAFN87HSdzoD0xencDGT0vRUKalLqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81MmQwODgtNjk4OS00ZTg5LTg3Nzct NTI2ZGNiMmEyM2JkLzEvemk2QlgycHByRmhSNjNZNWxQTzVmelAyWEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81MmQwODgtNjk4OS00ZTg5LTg3NzctNTI2ZGNiMmEyM2Jk LzEvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDBT0QAwQC BWUoAwQCLYgUAwQCU94cAwQCV/JwAwQCuRCUAwQCuRD0AwQCuWRoAwQCueI0AwQC wcsoAwQE2RSQAwQC2a68MA0EAgACMAcDBQAqALTAMA0GCSqGSIb3DQEBCwUAA4IB AQBwlv312kYZN8jUhue/L0zvXCcOpxW6UFCRdcBKnYKnMVgl7O/7RlwdPOctQ5jS MNvcrUaej60aVP+lyzu2/Pv4J9SB+zgangZEg91jTYtRCLZGlm7GbbkkIiQehKf5 gUHFzr4z0D6P7JeFIqIQhAFtQa9J1kscBM3JRXGL0h1427uCEKbicIjQF1D3k87T GeIAU7s5J4hQvHVuyLfE7/fEiYFpBj616a3YuLdnjxJa92enDS74KXmUHyNVKaki mlTA3wThamLNzIFq7TBfoyIkqV8dCd+AGWTjo+YzwoDhqfkeu4NO5LgSB2Q7y3N3 kJzupcqh8GfYjzuNl+Z1eRUJ -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:03 2026 by rpki-client